Last Updated: October 24, 2026 | Compliant with Office of the Data Protection Commissioner (ODPC) Kenya
We at Brightharbor are dedicated to retaining rigorous standardizations over personal parameters stored inside our systems. This statement details how we obtain, store, and utilize data metrics generated under active assessments.
The principal data controller under Kenyan Data Protection Act 2019 is Brightharbor, with centralized offices at Lower Savanna Dakar Rd, Greenspan Mall, Embakasi East, Nairobi, Kenya. Our legal contact desks correspond strictly via [email protected].
We process: (a) voluntarily completed data fields (full name, direct telephone, corporate email address, message texts), (b) automatic log indices (IP headers, geographical markers, specific cookies, system configurations), and (c) selective market research metrics received from strategic networks.
| Operational Purpose | Data Categories | Legal Grounds (Kenya Act 2019) |
|---|---|---|
| Advisory Intake Execution | Corporate Email, Telephone, Name | Performance of Contract Principles |
| Website Optimization | IP Logs, Cookie Signals | Explicit Consent Options (Opt-In) |
| Legal Dissemination Compliance | Verify Records, Audited Reports | Compliance with Media Council Laws |
This site applies standard Google Consent Mode v2 processes to evaluate visitor interactions. Analytical tracks (analytics_storage) and marketing systems (ad_storage) stay in a disabled state until visitors explicitly confirm preferences on our cookie banner.
We never trade personal records with third parties. Data is only processed by approved cloud-service platforms or legal bodies when required by the laws of Kenya.
According to the Data Protection Act 2019, individuals retain direct rights to query, delete, or limit processing of records. For formal appeals, contact the Office of the Data Protection Commissioner of Kenya (ODPC) or reach out directly to our compliance officer at [email protected].